[Interest] Qt5 and libressl

[Richard Moore]

On 12 November 2015 at 20:14, Diego Iastrubni <diegoiast at gmail.com> wrote:

> So... the official statement from Qt is that elliptic curves is a ...
> "safe" encryption to be used in the wild...?
>
>
​We provide facilities that let you choose which ciphersuites are enabled.
We also support plain text. ​



> (still remember in college how I was thought that this is a safe
> encryption because the NSA developed it... and it is fast...)
>
>
​Ironic that you're complaining about code that lets you choose if you want
the curves the NSA standardised enabled, or just want those developed by
others.​



> If this was not clear:
> I think that Thiago meant to say: "yea, I know this sux, and we are
> looking for someone to give us a patch and remove that MIM code".
>
> I might be wrong.
>
>
​You are.​ If you have a serious question ask it.

​Rich.​



> On Thu, Nov 12, 2015 at 8:20 PM, Thiago Macieira <
> thiago.macieira at intel.com> wrote:
>
>> On Thursday 12 November 2015 16:29:03 René J.V. Bertin wrote:
>> > Hello,
>> >
>> > Rebuilding Qt 5.5.0 with libressl 2.2.4 installed instead of openssl I
>> got
>> > this error:
>> >
>> >
>> qt-everywhere-opensource-src-5.5.0/qtbase/src/network/ssl/qsslcontext_openss
>> > l.cpp:347:33: error: ‘SSL_CTRL_SET_CURVES’ was not declared in this
>> scope
>> > SSL_CTRL_SET_CURVES,
>> >                                  ^
>> > make[3]: *** [.obj/qsslcontext_openssl.o] Error 1
>> >
>> >
>> > From the looks of it, libressl emulates a recent enough openssl version
>> to
>> > activate the code that refers to SSL_CTRL_SET_CURVES, but doesn't
>> actually
>> > provide the token.
>> >
>> > Is there an official position regarding building Qt 5 against libressl?
>>
>> Our current position is "our code is written for OpenSSL". If you want to
>> use
>> something that emulates OpenSSL, the burden is on you to make sure it's a
>> good
>> emulation.
>>
>> --
>> Thiago Macieira - thiago.macieira (AT) intel.com
>>   Software Architect - Intel Open Source Technology Center
>>
>> _______________________________________________
>> Interest mailing list
>> Interest at qt-project.org
>> http://lists.qt-project.org/mailman/listinfo/interest
>>
>
>
> _______________________________________________
> Interest mailing list
> Interest at qt-project.org
> http://lists.qt-project.org/mailman/listinfo/interest
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.qt-project.org/pipermail/interest/attachments/20151112/7f30470b/attachment.html>